Speed up unauthenticated login redirect

apiserver/frontend/handler.go

@@ -4,6 +4,7 @@ import (
 	"embed"
 	"io/fs"
 	"net/http"
+	"strings"
 
 	config "dkhalife.com/tasks/core/config"
 	"github.com/gin-gonic/gin"
@@ -12,6 +13,8 @@ import (
 //go:embed dist
 var embeddedFiles embed.FS
 
+var publicPaths = []string{"/login", "/privacy"}
+
 type Handler struct {
 	ServeFrontend bool
 }
@@ -29,6 +32,15 @@ func Routes(router *gin.Engine, h *Handler) {
 	}
 }
 
+func isPublicPath(path string) bool {
+	for _, p := range publicPaths {
+		if strings.HasPrefix(path, p) {
+			return true
+		}
+	}
+	return false
+}
+
 func staticMiddleware(root string) gin.HandlerFunc {
 	fileServer := http.FileServer(getFileSystem(root))
 
@@ -46,6 +58,15 @@ func staticMiddlewareNoRoute(root string) gin.HandlerFunc {
 	fileServer := http.FileServer(getFileSystem(root))
 
 	return func(c *gin.Context) {
+		if !isPublicPath(c.Request.URL.Path) {
+			target := "/login"
+			if q := c.Request.URL.RawQuery; q != "" {
+				target += "?" + q
+			}
+			c.Redirect(http.StatusFound, target)
+			return
+		}
+
 		c.Request.URL.Path = "/"
 		fileServer.ServeHTTP(c.Writer, c.Request)
 	}

frontend/src/utils/msal.ts

@@ -27,7 +27,7 @@ const doInitializeMsal = async () => {
     auth: {
       clientId: authConfig.client_id,
       authority: `https://login.microsoftonline.com/${authConfig.tenant_id}`,
-      redirectUri: window.location.origin,
+      redirectUri: `${window.location.origin}/login`,
     },
     cache: {
       cacheLocation: 'localStorage',